Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7FvVK_AoQWHYloBfb9krY3Karl0.roa
File: 7FvVK_AoQWHYloBfb9krY3Karl0.roa (raw, json)
Hash identifier: PGvxFTLQsB1Nzh/2rAHgKpCY9UjUbjGvjYk/p3HFlik=
Subject key identifier: EC:5B:D5:2B:F0:28:41:61:D8:96:80:5F:6F:D9:2B:63:72:9A:AE:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7B84C62EF29C5771AF8563870D7D344F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7FvVK_AoQWHYloBfb9krY3Karl0.roa
Signing time: Mon 05 Feb 2024 23:05:15 +0000
ROA not before: Mon 05 Feb 2024 23:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:7b84:b09/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7b:84:c6:2e:f2:9c:57:71:af:85:63:87:0d:7d:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 23:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5bd52bf0284161d896805f6fd92b63729aae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:34:a3:e1:57:21:a5:78:8b:a4:22:97:9c:
8a:e0:26:25:29:b9:ca:41:92:14:c8:93:82:f1:98:
bb:74:0d:2e:8c:0b:38:f7:09:28:fc:9e:3c:59:16:
02:0f:93:c1:44:d7:fa:29:36:bb:db:ce:64:7a:95:
07:37:2e:dd:9c:74:94:22:7e:78:2a:cc:db:40:c0:
e2:f3:65:32:c0:5c:3c:a3:8e:5f:ff:ca:e9:30:16:
83:3c:52:9e:50:66:bc:9f:00:ff:b4:ab:57:b2:51:
50:00:9c:e2:76:62:a6:23:84:b7:7b:f8:01:4c:84:
6c:37:1e:f2:d5:f6:36:d1:9d:92:bd:3e:01:c2:6a:
6a:c6:b0:1b:4e:0a:0b:17:9d:fd:04:26:6e:c2:16:
43:c1:bc:ef:d5:06:2b:0e:91:fa:13:b8:85:d0:5d:
cf:01:13:89:91:2e:07:f6:8a:27:10:81:a7:42:d4:
fb:18:f7:83:a1:9e:bb:84:ad:15:a4:14:fc:ed:b2:
03:9e:d9:e0:d9:05:e3:2b:6c:ab:d4:c3:3d:e2:43:
17:64:b7:78:a5:ef:68:58:20:95:b1:ed:76:5d:27:
10:e6:f8:38:0f:c8:af:4e:b7:a3:7e:43:4f:6c:99:
53:7c:1c:74:65:ed:25:19:d9:f8:55:9a:1c:7e:b5:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:D5:2B:F0:28:41:61:D8:96:80:5F:6F:D9:2B:63:72:9A:AE:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7FvVK_AoQWHYloBfb9krY3Karl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ac:2b:84:67:4b:5d:06:d6:98:30:11:fb:44:20:bf:cc:78:
de:2f:d3:2d:bb:f8:ea:25:e6:63:0f:d0:8b:10:59:13:2b:9b:
8f:d0:89:ae:13:16:09:10:98:03:6f:80:24:4a:7c:bb:86:71:
29:9d:1b:a5:9b:33:af:93:e3:40:b2:ea:1c:cd:2d:cf:01:4c:
dc:c4:91:16:c4:ae:47:46:d7:82:e0:33:81:b7:fb:dd:43:a3:
93:ea:61:9e:10:b3:02:61:aa:64:8d:95:55:25:0a:73:78:fe:
1b:62:e5:af:9c:e0:42:19:33:4b:3f:99:83:8a:4e:e8:87:e5:
bf:7a:5c:5e:c7:ff:01:8e:79:b1:cf:32:b9:43:45:19:3a:4a:
46:d3:40:6d:74:8e:1a:d7:0b:43:fa:8b:3b:f9:a7:51:50:7d:
59:88:79:a6:fe:24:d0:d2:cf:ef:db:62:62:10:ae:75:c8:7f:
91:6b:30:0a:89:0a:77:58:e6:a4:6d:6a:84:7c:f2:be:ae:a9:
a9:05:dd:1f:23:a6:f8:d2:28:de:a9:e1:ea:04:0d:20:3c:19:
52:82:19:82:12:f2:f4:58:46:07:07:ad:1d:3a:94:be:4c:fa:
33:5d:1a:6a:8a:4a:be:62:b1:a4:5a:6b:98:d3:6f:b1:b2:59:
92:60:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:42 2025 by rpki-client